Privacy Policy

1. Who we are

Barddle Inc (“Barddle,” “we,” “us”) operates the Barddle fitness companion at barddle.com. This policy describes what personal information we collect, why we collect it, and the choices you have.

2. Information we collect

We collect the following categories of personal information:

• Account information — email address, display name, authentication identifiers, and acceptance timestamps for our Terms and Privacy Policy.
• Health and fitness profile facts — height, weight, year of birth, sex, training experience, injuries or body concerns, sleep, energy, and fitness goals you provide during onboarding or later in settings.
• Practice events — workouts, check-ins, and other activity you log while using Barddle.
• Conversations with the agent— messages you send to the Barddle agent and the agent’s responses.
• Technical data — IP address, device and browser information, and cookies necessary for the service to function.

3. How we use your information

We use your information to:

• Provide and operate the Barddle service.
• Personalize the agent’s drafts and recommendations to your goals and history.
• Maintain account security and prevent abuse.
• Communicate service updates and respond to support requests.
• Comply with legal obligations.

We treat health and fitness information as sensitive. We use it to personalize your Barddle experience, not for advertising, resale, or training third-party AI models.

4. Legal bases for processing (EEA / UK)

Where the GDPR or UK GDPR applies, we rely on the following legal bases: contract (to provide the service you signed up for), legitimate interests (to keep the service secure and improve it), explicit consent (for processing health and fitness information where required, and for optional analytics where required), and legal obligation.

5. Third-party processors

We share data with the following processors, each under a written agreement:

• Supabase — authentication and database hosting.
• OpenRouter — routing layer for the language models that power the agent.
• Anthropic — provider of the underlying Claude models used by the agent.
• Vercel — web hosting and edge delivery.
• Plausible Analytics — privacy-friendly, cookie-less site analytics. Records aggregated, anonymous page views and CTA-click counts to help us understand which pages and messages resonate. Does not use cookies, does not store IP addresses, and does not track visitors across sites.

When you converse with the agent, the contents of your messages are transmitted to OpenRouter and Anthropic for inference. We do not allow these providers to use your content to train their models.

6. Cookies

We use a small number of strictly necessary cookies, including a session cookie set by Supabase Auth and an ob_done cookie that records whether you have completed onboarding. We do not use advertising cookies. Our analytics provider (Plausible) is cookie-less and does not require a consent banner under the GDPR or ePrivacy Directive.

7. Data retention

We retain your account and practice history for as long as your account is active. When you delete your account, we delete or anonymize associated data within 30 days, except where we are required to retain it for legal or accounting purposes.

You can export your account data as a JSON file or delete your account from your Barddle settings. Deleting your account removes your profile facts, goals, events, conversations, and memory entries through database cascades tied to your user id.

8. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information; to withdraw consent where processing is based on consent; to restrict or object to certain processing; and to lodge a complaint with a supervisory authority. You can export and delete your data from settings. For other requests, contact us at founder@barddle.com.

9. International transfers

Barddle is operated from outside the EEA and UK. Where we transfer personal data across borders, we rely on appropriate safeguards such as the Standard Contractual Clauses.

10. Children

Barddle is not directed to anyone under 18, and we do not knowingly collect data from minors. If you believe a minor has provided us personal information, contact us and we will delete it.

11. Changes to this policy

We will post any material changes to this policy on this page and update the “Last updated” date above. If changes are significant, we will notify you by email.

12. Contact

Questions about this policy? Email founder@barddle.com.

Barddle Inc · Operating from Sheridan, Wyoming, USA.